Thursday, 1 February 2007

Apache Licensed HDIV Adds Security to Struts Applications

the API and Struts specification. HDIV can be used in applications developed in Struts in a transparent way to the programmer and without adding any complexity to the application development. It is possible to use HDIV in applications that don't use Struts, but it is necessary to modify the application.

The following security functionalities are added to the original Struts version:

• Integrity: HDIV guarantees integrity of the data generated by the server, which should not be modified by the client. This property helps to avoid all vulnerabilities based on the parameter tampering.
• Confidentiality: HDIV guarantees confidentiality of data.